Red Hat Security Advisory

RHSA-2023:3827

libtiff security update

Released 2023-06-27 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AppStream (v. 8) libtiff-4.0.9-28.el8_8, libtiff-devel-4.0.9-28.el8_8
Red Hat Enterprise Linux CRB (v. 8) libtiff-tools-4.0.9-28.el8_8

Fixes 1 record

TI-2022-23898 CVE-2022-48281 · GHSA-4qr3-39h9-qwp4

processCropSelections in tools/tiffcrop.c in LibTIFF through 4.5.0 has a heap-based…

MEDIUM 58

processCropSelections in tools/tiffcrop.c in LibTIFF through 4.5.0 has a heap-based buffer overflow (e.g., "WRITE of size 307203") via a crafted TIFF image.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00456 Published 2023-01-23 Partial fix CWE-787